Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File:                     58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier:          9qKMgtMLNmbFL7If+BdLeggOyqFoIF2sJjKB+o/EF1k=
Subject key identifier:   7C:88:4D:45:D2:79:DF:B8:7F:10:F0:76:96:58:81:B4:45:1A:2B:DF
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer:       /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial:       01987AF7142BBEACF36AF4517D95F0BFD24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number:          0AD4
Signing time:             Tue 05 Aug 2025 16:01:09 +0000
Manifest this update:     Tue 05 Aug 2025 16:01:09 +0000
Manifest next update:     Wed 06 Aug 2025 16:01:09 +0000
Files and hashes:         1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
                          2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: HImyNV/MdoPFTJlaoLdQ4s3ccDC2ZveDd40ho23M7q0=)
                          3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
                          4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
                          5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
                          6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
                          7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
                          8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
                          9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f7:14:2b:be:ac:f3:6a:f4:51:7d:95:f0:bf:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
        Validity
            Not Before: Aug  5 16:01:09 2025 GMT
            Not After : Aug  6 16:01:09 2025 GMT
        Subject: CN=7c884d45d279dfb87f10f076965881b4451a2bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:0e:e8:b3:b3:c4:9d:45:a0:97:e4:ff:dd:
                    4b:60:6e:a1:92:99:b4:15:1b:52:cf:1f:76:7c:c7:
                    12:36:5d:03:38:e5:70:92:11:11:4f:ae:4a:b0:fd:
                    a0:74:82:9d:47:c7:59:b5:62:92:bd:b3:bf:47:53:
                    02:32:7a:bb:7f:4d:56:92:a7:f1:7e:6e:85:dc:6e:
                    dc:eb:f7:e1:23:55:11:f0:78:43:f4:04:d9:1f:3c:
                    23:d1:20:46:13:0e:a3:d9:4a:f5:b5:e2:84:25:d3:
                    05:7d:4e:b9:ab:b0:64:74:d0:f9:42:a5:d9:c5:5d:
                    43:04:c1:f7:5a:3f:e5:c1:13:3f:50:b8:cb:47:a9:
                    62:80:15:10:72:47:f8:9f:97:35:90:38:e1:af:a9:
                    79:e1:0d:7d:13:c9:60:d2:23:f4:34:dd:0d:03:d5:
                    03:ef:9a:88:c1:1a:2e:24:c2:9b:65:72:a6:f5:de:
                    ba:3b:da:d0:33:6b:44:10:40:11:6b:49:e5:ee:96:
                    b4:0a:fb:85:e3:69:22:66:d1:f0:65:a8:ab:84:7b:
                    2e:b9:ed:53:ba:4a:72:2a:0c:8a:4e:2c:cc:35:2e:
                    0d:e1:68:89:5b:95:6d:7a:65:81:a4:d9:fb:e2:a8:
                    82:2b:dd:4d:47:a6:d4:df:0e:f8:da:4b:11:68:fb:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:88:4D:45:D2:79:DF:B8:7F:10:F0:76:96:58:81:B4:45:1A:2B:DF
            X509v3 Authority Key Identifier:
                keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:a5:27:1a:73:42:4c:ec:d1:1f:61:18:5d:78:88:20:06:b4:
         1c:7c:38:a5:a2:79:08:bd:56:ec:c6:82:bf:f7:05:59:43:d5:
         cc:1f:b5:f7:28:40:1f:99:49:30:c9:22:2d:9b:a9:c0:7b:14:
         fe:8a:d0:19:86:b1:29:b2:eb:9f:eb:ef:be:9d:f2:d7:d7:fd:
         33:0d:15:de:48:45:03:2a:9f:c4:db:a9:72:ee:ff:6d:06:c2:
         28:09:88:fc:44:51:f6:10:af:e9:fc:59:d3:32:0d:8f:04:f0:
         37:76:72:65:02:2c:9c:c5:d1:5f:54:14:bc:3f:bc:eb:ff:d6:
         06:c8:a3:13:68:27:22:87:9f:ee:7b:45:16:36:dd:53:f5:c6:
         4e:6e:e2:65:d6:50:9c:6a:e8:e0:31:33:df:e6:bf:b0:fb:d4:
         ce:a1:1f:69:2f:d4:cf:85:1d:82:b6:b3:19:a2:de:67:ff:bb:
         40:62:8f:76:38:15:46:12:a1:9c:c1:1b:af:c2:0c:c6:f2:00:
         36:2f:88:8c:c8:5c:20:5c:4e:dd:5a:c6:fa:7e:58:21:8a:03:
         38:08:3f:c3:54:82:4e:06:5c:b1:c3:27:1a:88:67:e8:cd:7d:
         2f:88:b8:8a:33:8b:97:97:d0:01:39:84:bb:af:8a:3a:c1:75:
         27:04:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:08:04 2025 by rpki-client